Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FB5C51213D511F1B8FEA7EDDAE4EC9C.roa
File: 0FB5C51213D511F1B8FEA7EDDAE4EC9C.roa (raw, json)
Hash identifier: 8Z9gtarfroRHEZrOGwO3esg5dMCLR8BVzUA3KOo4yBg=
Subject key identifier: 49:9D:D8:25:73:18:AC:EF:BD:9D:C2:E3:38:D7:C2:96:5A:77:93:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BC4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FB5C51213D511F1B8FEA7EDDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 12:08:44 +0000
ROA not before: Fri 27 Feb 2026 12:08:39 +0000
ROA not after: Sat 14 Mar 2026 12:08:39 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113742 (0x1bc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 27 12:08:39 2026 GMT
Not After : Mar 14 12:08:39 2026 GMT
Subject: CN=69a1894c-7fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:cc:c7:76:24:12:21:cb:bd:6c:41:27:59:
e8:0f:97:67:37:08:cd:12:b5:83:64:3d:6f:37:e2:
b7:06:50:a3:3e:98:27:29:af:00:f2:ac:0d:3b:d7:
69:27:ea:36:32:2b:76:47:25:9f:43:5b:c8:bc:34:
b9:c6:a2:11:90:f8:9d:c8:08:ce:73:66:1c:72:89:
3e:76:ef:a5:c8:89:8b:3a:ea:97:66:56:44:a8:b2:
70:35:92:87:18:56:d1:e3:ec:12:bf:74:f1:da:bf:
58:42:f8:d3:aa:aa:a7:b7:38:2f:1c:d9:b1:06:2c:
91:54:ba:ad:5c:53:43:db:71:1a:cb:3a:19:88:ca:
e5:35:91:68:cd:df:79:d3:b5:02:8c:37:ba:c2:8f:
26:92:aa:43:a3:3b:c1:60:86:02:5b:c7:e8:46:88:
03:04:9e:6e:8e:42:9d:6a:37:11:32:b2:cf:50:6d:
24:9b:b9:2b:f3:79:5d:33:09:54:18:48:a9:a6:68:
ce:fe:bb:b0:5a:44:c5:3b:65:5c:9c:8b:cb:8b:32:
21:d3:f9:cf:94:98:f0:d5:4a:85:ff:31:8a:cf:22:
c0:4d:94:bc:dd:d9:33:4d:bf:10:f5:e6:5a:5e:4d:
1c:0a:9d:85:58:34:01:94:8f:5a:4f:82:60:4f:cb:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:D8:25:73:18:AC:EF:BD:9D:C2:E3:38:D7:C2:96:5A:77:93:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FB5C51213D511F1B8FEA7EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
63:85:8f:e1:de:57:36:49:0e:e2:00:3f:9a:d4:3e:60:4c:1d:
fa:76:f7:00:54:69:fc:fe:83:38:c6:ca:7a:26:f0:67:ae:90:
13:da:c3:bc:ac:5f:82:96:e1:fe:0c:b3:70:be:b4:11:6c:e0:
01:86:cf:89:58:12:4b:cd:0e:5a:20:72:a5:a8:42:b6:75:b3:
24:c4:cc:90:f6:79:b3:e0:e0:b1:8e:b9:39:40:fa:60:05:16:
c5:10:5b:97:59:ef:68:b3:7f:1c:e4:41:d8:60:06:6f:4a:c3:
66:49:69:7f:02:6b:96:7c:53:56:f6:91:ef:2d:f2:a5:2d:30:
5d:d1:29:b7:b7:f5:44:b2:2f:1a:07:eb:48:7b:93:24:d8:6f:
56:be:80:b3:be:c4:79:f4:13:96:67:c1:94:bb:46:43:70:b0:
0b:4b:1d:ac:22:01:23:8e:2c:9b:12:f6:16:b5:e3:bf:80:28:
de:5b:64:24:71:94:57:bd:da:e6:8a:76:65:b3:9b:ed:13:9a:
68:b5:2e:5d:5d:a2:3b:59:ae:40:92:32:59:2e:cd:ed:7b:17:
53:69:93:a4:97:5c:69:cf:63:b3:d4:07:43:8d:f3:d1:12:bd:
ee:41:31:7c:9b:ab:f4:31:4b:10:2f:1b:be:00:87:e0:75:70:
c9:ae:78:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbxOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjI3MTIwODM5WhcNMjYwMzE0MTIwODM5WjAYMRYw
FAYDVQQDEw02OWExODk0Yy03ZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1tTMx3YkEiHLvWxBJ1noD5dnNwjNErWDZD1vN+K3BlCjPpgnKa8A8qwN
O9dpJ+o2Mit2RyWfQ1vIvDS5xqIRkPidyAjOc2Yccok+du+lyImLOuqXZlZEqLJw
NZKHGFbR4+wSv3Tx2r9YQvjTqqqntzgvHNmxBiyRVLqtXFND23EayzoZiMrlNZFo
zd9507UCjDe6wo8mkqpDozvBYIYCW8foRogDBJ5ujkKdajcRMrLPUG0km7kr83ld
MwlUGEippmjO/ruwWkTFO2VcnIvLizIh0/nPlJjw1UqF/zGKzyLATZS83dkzTb8Q
9eZaXk0cCp2FWDQBlI9aT4JgT8u9RQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEmd
2CVzGKzvvZ3C4zjXwpZad5PiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRkI1QzUxMjEzRDUxMUYxQjhGRUE3RUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlocMA0GCSqGSIb3DQEB
CwUAA4IBAQBjhY/h3lc2SQ7iAD+a1D5gTB36dvcAVGn8/oM4xsp6JvBnrpAT2sO8
rF+CluH+DLNwvrQRbOABhs+JWBJLzQ5aIHKlqEK2dbMkxMyQ9nmz4OCxjrk5QPpg
BRbFEFuXWe9os38c5EHYYAZvSsNmSWl/AmuWfFNW9pHvLfKlLTBd0Sm3t/VEsi8a
B+tIe5Mk2G9WvoCzvsR59BOWZ8GUu0ZDcLALSx2sIgEjjiybEvYWteO/gCjeW2Qk
cZRXvdrminZls5vtE5potS5dXaI7Wa5AkjJZLs3texdTaZOkl1xpz2Oz1AdDjfPR
Er3uQTF8m6v0MUsQLxu+AIfgdXDJrng/
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:16 2026 by rpki-client